ࡱ > y 3 bjbjEE ' ' 5 % % % % % D i i i m i r
. ; ; ; x + h Y
[
[
[
[
[
[
. [
% _ _ _ [
% % ; ; x , a a a _ Z % ; % ; Y
a _ Y
a a ; i Z P E
B 0 r N % a _ _ _ [
[
a _ _ _ r _ _ _ _ _ _ _ _ _ _ _ _ _ :
Silverlight Deployment Guide
Microsoft Corporation
Published: September 2007
Authors: David Tesar
Editor: Peter Puszkiewicz
Abstract
This guide helps you to plan and carry out a corporate deployment of Silverlight. The guide describes the system requirements and deployment methods, as well as the techniques to maintain and support Silverlight after deployment.
The information contained in this document represents the current view of Microsoft Corporation on the issues discussed as of the date of publication. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information presented after the date of publication.
This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS DOCUMENT.
Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording or otherwise), or for any purpose, without the express written permission of Microsoft.
Microsoft may have patents, patent applications, trademarks, copyrights or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights or other intellectual property.
Unless otherwise noted, the example companies, organizations, products, domain names, e-mail addresses, logos, people, places and events depicted herein are fictitious, and no association with any real company, organization, product, domain name, e-mail address, logo, person, place or event is intended or should be inferred.
2007 Microsoft Corporation. All rights reserved.
Microsoft, Windows, Windows Vista, Windows Server, Silverlight, Internet Explorer, Windows Media, SharePoint, and Active Directory are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries.
Contents
TOC \o "1-4" \h HYPERLINK \l "_Toc178408535"Silverlight Deployment Guide PAGEREF _Toc178408535 \h 1
HYPERLINK \l "_Toc178408536"Abstract PAGEREF _Toc178408536 \h 1
HYPERLINK \l "_Toc178408537"Contents PAGEREF _Toc178408537 \h 3
HYPERLINK \l "_Toc178408538"Silverlight Deployment Guide PAGEREF _Toc178408538 \h 5
HYPERLINK \l "_Toc178408539"Silverlight value proposition PAGEREF _Toc178408539 \h 5
HYPERLINK \l "_Toc178408540"How to deploy Silverlight PAGEREF _Toc178408540 \h 5
HYPERLINK \l "_Toc178408541"Part 1: Preparing for Deployment PAGEREF _Toc178408541 \h 7
HYPERLINK \l "_Toc178408542"Planning the Silverlight Deployment PAGEREF _Toc178408542 \h 7
HYPERLINK \l "_Toc178408543"System requirements for Silverlight PAGEREF _Toc178408543 \h 7
HYPERLINK \l "_Toc178408544"Select your deployment method PAGEREF _Toc178408544 \h 8
HYPERLINK \l "_Toc178408545"Setting Up and Administering a Pilot Program PAGEREF _Toc178408545 \h 9
HYPERLINK \l "_Toc178408546"Conducting Lab Testing PAGEREF _Toc178408546 \h 9
HYPERLINK \l "_Toc178408547"Planning the pilot program PAGEREF _Toc178408547 \h 9
HYPERLINK \l "_Toc178408548"Part 2: Deploying Silverlight PAGEREF _Toc178408548 \h 10
HYPERLINK \l "_Toc178408549"Manual Install options for Silverlight PAGEREF _Toc178408549 \h 10
HYPERLINK \l "_Toc178408550"Selecting the right version of Silverlight PAGEREF _Toc178408550 \h 10
HYPERLINK \l "_Toc178408551"Installation Switches PAGEREF _Toc178408551 \h 11
HYPERLINK \l "_Toc178408552"Using Group Policy to Install Silverlight PAGEREF _Toc178408552 \h 11
HYPERLINK \l "_Toc178408553"Group Policy Scripts Extension Overview PAGEREF _Toc178408553 \h 11
HYPERLINK \l "_Toc178408554"Assigning computer startup scripts PAGEREF _Toc178408554 \h 12
HYPERLINK \l "_Toc178408555"Example Script PAGEREF _Toc178408555 \h 13
HYPERLINK \l "_Toc178408556"Deploying Computer Startup Scripts PAGEREF _Toc178408556 \h 14
HYPERLINK \l "_Toc178408557"Specifying maximum time for startup scripts to run PAGEREF _Toc178408557 \h 15
HYPERLINK \l "_Toc178408558"Using SMS to Install Silverlight PAGEREF _Toc178408558 \h 16
HYPERLINK \l "_Toc178408559"Overview: Automating the deployment of Silverlight PAGEREF _Toc178408559 \h 16
HYPERLINK \l "_Toc178408560"Preparing to automatically deploy Silverlight PAGEREF _Toc178408560 \h 16
HYPERLINK \l "_Toc178408561"Step 1: Creating an SMS package for Silverlight PAGEREF _Toc178408561 \h 16
HYPERLINK \l "_Toc178408562"Step 2: Selecting the SMS distribution servers PAGEREF _Toc178408562 \h 18
HYPERLINK \l "_Toc178408563"Step 3: Creating and running a job to distribute the SMS package PAGEREF _Toc178408563 \h 18
HYPERLINK \l "_Toc178408564"The installation process PAGEREF _Toc178408564 \h 19
HYPERLINK \l "_Toc178408565"Part 3: Maintaining and Supporting Silverlight PAGEREF _Toc178408565 \h 19
HYPERLINK \l "_Toc178408566"Managing Silverlight Settings Through Group Policy PAGEREF _Toc178408566 \h 20
HYPERLINK \l "_Toc178408567"Group Policy overview PAGEREF _Toc178408567 \h 20
HYPERLINK \l "_Toc178408568"Using Administrative Template settings to manage Silverlight PAGEREF _Toc178408568 \h 20
HYPERLINK \l "_Toc178408569"ADM and ADMX file template settings PAGEREF _Toc178408569 \h 21
HYPERLINK \l "_Toc178408570"Registry-based Silverlight policy settings PAGEREF _Toc178408570 \h 24
HYPERLINK \l "_Toc178408571"Modifying registry-based Silverlight policy settings PAGEREF _Toc178408571 \h 25
HYPERLINK \l "_Toc178408572"Keeping Silverlight Updated PAGEREF _Toc178408572 \h 25
HYPERLINK \l "_Toc178408573"Automatic Updates PAGEREF _Toc178408573 \h 25
HYPERLINK \l "_Toc178408574"Software update methods PAGEREF _Toc178408574 \h 26
HYPERLINK \l "_Toc178408575"Systems Management Server PAGEREF _Toc178408575 \h 26
HYPERLINK \l "_Toc178408576"Group Policy Software Installation PAGEREF _Toc178408576 \h 26
HYPERLINK \l "_Toc178408577"Windows Server Update Services (WSUS) PAGEREF _Toc178408577 \h 27
HYPERLINK \l "_Toc178408578"Scripted or Manual PAGEREF _Toc178408578 \h 27
HYPERLINK \l "_Toc178408579"Troubleshooting PAGEREF _Toc178408579 \h 27
HYPERLINK \l "_Toc178408580"Silverlight installation and uninstallation PAGEREF _Toc178408580 \h 27
HYPERLINK \l "_Toc178408581"Silverlight Install process fails PAGEREF _Toc178408581 \h 27
HYPERLINK \l "_Toc178408582"Unable to uninstall Silverlight PAGEREF _Toc178408582 \h 28
HYPERLINK \l "_Toc178408583"Disabling Silverlight add-on in Internet Explorer 7 PAGEREF _Toc1784085 8 3 \ h 2 9
S i l v e r l i g h t D e p l o y m e n t G u i d e
T h e S i l v e r l i g h t "! D e p l o y m e n t G u i d e d o c u m e n t s t h e o p t i o n s a n d p r o c e s s e s i n v o l v e d i n d e p l o y i n g S i l v e r l i g h t 1 . 0 t o u s e r ' s c o m p u t e r s t h a t a r e r u n n i n g M i c r o s o f t W i n d o w s X P w i t h S e r v i c e P a c k 2 ( S P 2 ) , W i n dows Server 2003, or Windows Vista in a network environment. Silverlight also installs on Apple Mac OS X, but Apple deployments are outside of the scope of this document.
To learn more about Silverlight, go to HYPERLINK "http://www.microsoft.com/silverlight"http://www.microsoft.com/silverlight.
This guide should be used during the planning phase of your Silverlight deployment project. The information provides key points of guidance for a deployment project. It is not intended as a step-by-step guide, and not all of the steps described in this guide are necessary for deploying Silverlight in every environment.
Silverlight value proposition
Silverlight delivers the next generation of Microsoft .NETbased media experiences and rich interactive applications for internet browsers. Silverlight compliments other Microsoft products such as ASP.NET, Windows Server and Windows Media to deliver unprecedented cross browser, cross platform rich interactive web application experiences. Silverlight architecture is consistent with Web 2.0 paradigms and it enables enterprise web developers to extend their skills and deliver better experiences.
The following are benefits of deploying Silverlight in an enterprise:
Compatibility with Silverlight-enabled websites
Ability to offer and consume media as part of the web experience on Windows and Macintosh operating systems
Simple integration with existing Web technologies and assets such as ASP.NET and SharePoint services
Better user experience for web application without deployment considerations
For more information on why you should use Silverlight, please visit: HYPERLINK "http://www.microsoft.com/silverlight/"http://www.microsoft.com/silverlight/ and click on Why Silverlight.
How to deploy Silverlight
The process of deploying Silverlight to your organization's users' computers is organized in this deployment guide as follows:
StepPagePlan the deploymentHYPERLINK \l "DSDOC_8b907bbd_8fff_4bbc_91cd_9ce0c6ec61" \o "Part 1: Preparing for Deployment"Part 1: Pr e p a r i n g f o r D e p l o y m e n t
H Y P E R L I N K \ l " D S D O C _ 0 3 7 1 e 0 8 7 _ d 7 4 6 _ 4 1 4 3 _ 9 9 f b _ 9 a c 8 6 6 c b 5 9 " \ o " P l a n n i n g t h e S i l v e r l i g h t D e p l o y m e n t " P l a n n i n g t h e S i l v e r l i g h t D e p l o y m e n t d e t a i l s h o w t o p l a n y o u r d e p l o y m e n t p r o c e s s e s a n d s t r a t e g i e s . T e s t t h e d e p l o y m e n t s t r a t e g y HYPERLINK \l "DSDOC_c3c7bfa7_55e0_4f47_b62d_5d57ddfd64" \o "Setting Up and Administering a Pilot Program"Setting Up and Administering a Pilot Program describes the testing process for Silverlight deployment.Deploy SilverlightHYPERLINK \l "DSDOC_dead6273_c1c0_4e70_b37a_5824f911cf" \o "Part 2: Deploying Silverlight"Part 2: Deploying Silverlight
HYPERLINK \l "DSDOC_6de5565b_c9fc_41ee_b1c9_35a1bd9872" \o "Manual Install options for Silverlight"Manual Install options for Silverlight focuses on how to effectively use shared folders, Web, and e-mail procedures to deploy Silverlight. It also details the switches for the installation executable file.
HYPERLINK \l "_Using_Group_Policy" \o "Using Group Policy to Install Silverlight"Using Group Policy to Install Silverlight details the procedures to deploy Silverlight using Group Policy.
H Y P E R L I N K \ l " D S D O C _ c f 1 1 d a 2 e _ 1 c 6 d _ 4 0 9 d _ a 2 d e _ 5 9 9 2 2 9 8 d a 3 " \ o " U s i n g S M S t o I n s t a l l S i l v e r l i g h t " U s i n g S M S t o I n s t a l l S i l v e r l i g h t e x p l o r e s m e t h o d s f o r u s i n g M i c r o s o f t S y s t e m M a n a g e m e n t S e r v e r ( S M S ) t o d e p l o y S i l v e r l i g h t . M a i n t a i n S i l v e r l i g h t i n y o u r e n v i r o n m e n t H Y P E R L I N K \ l " D S D O C _ b 7 e 9 f 0 1 6 _ a 3 e 1 _ 4 c 8 e _ 8 d c e _ e 0 4 8 f 1 9 2 a e " \ o " P a r t 3 : M a i n t a i n i n g a n d S u p p o r t i n g S i l v e r l i g h t " P a r t 3 : M a i n t a i n i n g a n d S u p p o r t i n g S i l v e r l i g h t
H Y P E R L I N K \ l " D S D O C _ c c 6 3 2 4 3 b _ e 0 5 7 _ 4 6 0 8 _ 9 2 0 6 _ 0 e 9 d a 6 6 6 5 5 " \ o " M a n a g i n g B r o w s e r S e t t i n g s T h r o u g h G r o u p P o l i c y " M a n a g i n g S e t t i n g s T h r o u g h G r o u p P o l i c y d e s c r i b e s h o w t o m a n a g e S i l v e r l i g h t i n t h e A c t i v e D i r e c t o r y s e r v i c e s e n v i r o n m e n t b y u s i n g G r o u p P o l i c y .
H Y P E R L I N K \ l " D S D O C _ 4 5 7 d e 5 1 b _ 2 a f 5 _ 4 8 a 1 _ 9 a 1 6 _ 8 a 1 9 3 f f 5 0 f " \ o " K e e p i n g S i l v e r l i g h t U p d a t e d " K e e p i n g S i l v e r l i g h t U p d a t e d r e v i e w s s y s t e m m a n a g e m e n t , a u t o m a t i c u p d a t e , a n d o t h e r t o o l s t o d e p l o y u p d a t e d v e r s i o n s o f S i l v e r l i g h t t o y o u r u s e r s ' c o m p u t e r s .
H Y P E R L I N K \ l " D S D O C _ 0 8 2 4 9 5 d 9 _ 8 4 c 1 _ 4 7 4 b _ a 6 c 0 _ e 1 1 c 4 c 3 4 5 9 " \ o " T r o u b l e s h o o t i n g " T r o u b l e s h o o t i n g helps you troubleshoot Silverlight installation, Group Policy settings, and features in your corporate environment.
Part 1: Preparing for Deployment
Part 1 of the Silverlight Deployment Guide describes how to deploy Silverlight to your organization. It includes information about planning for the deployment and performing a successful pilot program.
HYPERLINK \l "DSDOC_0371e087_d746_4143_99fb_9ac866cb59" \o "Planning the Silverlight Deployment"Planning the Silverlight Deployment details how to plan your deployment processes and strategies.
HYPERLINK \l "DSDOC_c3c7bfa7_55e0_4f47_b62d_5d57ddfd64" \o "Setting Up and Administering a Pilot Program"Setting Up and Administering a Pilot Program discusses how to prepare your users for Silverlight through a training program and describes the testing process for Silverlight deployment.
Planning the Silverlight Deployment
To install Silverlight successfully, you must carefully plan your deployment processes and strategies. This section of the deployment guide contains information about how to evaluate and plan your deployment, including:
1. Evaluating users' computers for compatibility with SilverlightHYPERLINK \l "DSDOC_BKMK_101d179b2_1040_42a1_82e6_68de" \o "System Requirements for Silverlight"System Requirements for Silverlight2. Identifying your deployment methodHYPERLINK \l "DSDOC_BKMK_201d179b2_1040_42a1_82e6_68de" \o "Select Your Deployment Method"Select Your Deployment Method
System requirements for Silverlight
The table below lists the minimum requirements your computer needs to run Silverlight. Silverlight will install on the 32-bit or 64-bit editions of any version of either WindowsXP running Service Pack2(SP2), Windows Server 2003, or Windows Vista. Silverlight also installs on Apple Mac OS X, but Apple deployments are outside of the scope of this document. Silverlight will not install if the operating system or browser is not supported. Silverlight may install if some of the other minimum recommendations are not met although the Silverlight functionality will be significantly reduced or possibly non-operational.
Windows-based PC RequirementsComputer/processorIntel Pentium III 450-megahertz (MHz) or faster, equivalent processorOperating system WindowsXP withSP2
Windows 2003 Server
WindowsVistaMemory 128 MB Browser (must be this revision or later)Microsoft Internet Explorer 6 or 7, Mozilla Firefox 1.5.0.8, or Firefox 2.0.x
Macintosh Computer RequirementsComputer/processorPower PC G3 500-megahertz (MHz) or faster processor OR
Intel Core Duo 1.83-gigahertz (GHz) or faster processorOperating systemApple Mac OS X 10.4.8 or higherMemory (only for Intel Processor)128 MB Browser (must be this revision or later)Firefox 1.5.0.8, Firefox 2.0.x, and Apple Safari 2.0.4
Select your deployment method
The method you select for your organization's deployment will depend on your existing infrastructure, security requirements, and user location. You can use various methods to distribute Silverlight to your users. You can automate installations of Silverlight with preselected settings so that no user action is required, or you can allow users see the installation process on the screen.
You might want to use additional tools as part of the deployment process. Consider the following applications and how you can use them to support your deployment of Silverlight:
M i c r o s o f t S y s t e m s M a n a g e m e n t S e r v e r c a n h e l p y o u a u t o m a t e a l a r g e - s c a l e d e p l o y m e n t o f S i l v e r l i g h t b y d i s t r i b u t i n g a n d i n s t a l l i n g S i l v e r l i g h t o n y o u r u s e r s ' c o m p u t e r s . T h i s a u t o m a t e d i n s t a l l a t i o n r e q u i r e s n o i n t e r v e n t i o n f r o m y o u o r y o u r u s e r s . Y o u c a n c r eate a package definition (.sms) file that defines how Silverlight is installed on users' computers. Then you can create a job to distribute your package to users' computers. For more information about incorporating SMS into your deployment process, see HYPERLINK \l "DSDOC_cf11da2e_1c6d_409d_a2de_5992298da3" \o "Using SMS to Install Silverlight"Using SMS to Install Silverlight in this deployment guide.
Group Policy is ideal to deploy Silverlight in small to medium sized organizations or where it is not being deployed to a large number of users simultaneously. Group policy allows flexibility to distribute Silverlight to individual or groups of users and computers as well as specific OUs. For more information about incorporating group policy in your deployment process, see HYPERLINK \l "_Using_Group_Policy" \o "Using Group Policy to Install Silverlight"Using Group Policy to Install Silverlight in this deployment guide.
M a n u a l O p t i o n s e x i s t i n t h i s s e c t i o n t o l i g h t l y a s s i s t d e p l o y m e n t s i n a n e n v i r o n m e n t n o t u s i n g g r o u p p o l i c y o r S M S s u c h a s e n v i r o n m e n t s u s i n g 3 r d p a r t y s o f t w a r e d e p l o y m e n t t o o l s . I n s t a l l f i l e s e l e c t i o n a n d i n s t a l l a t i o n s w i t c h e s a r e c o v e r e d h e r e .
S e t t i ng Up and Administering a Pilot Program
Before you deploy Silverlight to your users, test your installation of Silverlight in a lab, and then conduct the pilot program with a limited number of participants to refine your deployment configurations and strategies. This process will help you validate your deployment plan and ensure that you are ready for full-scale deployment.
Conducting Lab Testing
Install Silverlight on the lab computers in the same way that you plan to install Silverlight on your users' computers. In some cases, this might mean setting up the network installation location on the server and then installing Silverlight on the lab computers from the server.
Automating your installation is an important step in reducing the cost of migration. You can choose to run the installation process from start to finish without user intervention. You can also install Silverlight from the server so that you do not need to configure individual computers. Complete any automation work in the lab before you conduct the pilot program.
After you install Silverlight on the lab computers, verify that the software runs correctly by visiting the website HYPERLINK "http://www.microsoft.com/silverlight/"http://www.microsoft.com/silverlight/. The site will transition to an animation that notifies you that Silverlight was installed correctly.
If desired, test internal or external Web sites that are critical to the business that will be accessed with your browser. During the testing process, maintain a record of all issues. These records will help you design solutions to correct the issues you encountered. Then verify each solution by using the same testing process in the lab. If you run into problems, see HYPERLINK \l "DSDOC_082495d9_84c1_474b_a6c0_e11c4c3459" \o "Troubleshooting"Troubleshooting in Part3 of this deployment guide. This section provides information about commonly reported issues and solution strategies.
Planning the pilot program
After you test the deployment process in the lab, plan your pilot program. This program provides a scaled-down version of the final deployment. The goal of the pilot program is to further test and refine deployment strategies and configurations in everyday use among a limited group of users.
To plan the pilot program, complete the following tasks:
S e l e c t a p p r o p r i a t e p i l o t g r o u p p a r t i c i p a n t s , a n d p r e p a r e t h e m f o r t h e p i l o t p r o g r a m . S e l e c t g r o u p s t h a t r e p r e s e n t t h e d i v e r s i t y o f y o u r c o m p u t e r u s e r s . I f y o u r o r g a n i z a t i o n i n c l u d e s l a r g e u s e r g r o u p s o r g r o u p s w i t h v a r i o u s c o m p u t i n g e n v i r o n m e n t s o r r e q u i r e m e n t s , y o u m i g h t n e e d t o s e l e c t s e v e r a l p i l o t g r o u p s .
C r e a t e a d o c u m e n t o r d a t a b a s e t o t r a c k y o u r p r o g r e s s a n d r e c o r d i s s u e s t h a t m i g h t r e q u i r e f u r t h e r a c t i o n .
P a r t 2 : D e p l o y i n g S i l v e r l i g h t
A f t e r p l a n n i n g a n d t e s t i n g , t h e f i n a l s t e p i n t he deployment process is rolling out your installation of Silverlight to your users. Part2 of the Silverlight Deployment Guide describes the processes that are used to deploy Silverlight.
HYPERLINK \l "DSDOC_6de5565b_c9fc_41ee_b1c9_35a1bd9872" \o "Manual Install options for Silverlight"Manual Install options for Silverlight provides some basic information about the install file selection, installation switches, and MSI/MSP extraction to assist deployments in an environment not using group policy or SMS.
HYPERLINK \l "_Using_Group_Policy" \o "Using Group Policy to Install Silverlight"Using Group Policy to Install Silverlight details the procedures to deploy Silverlight using Group Policy.
HYPERLINK \l "_Using_SMS_to" \o "Using SMS to Install Silverlight"Using SMS to Install Silverlight explores methods for using Microsoft System Management Server (SMS) to deploy Silverlight.
Manual Install options for Silverlight
This section provides basic information for deploying Silverlight by providing file version information, installation switches, and MSI extraction. Deploying Silverlight through SMS or group policy can be performed silently without user intervention and is explained later in this document. This section may be useful for companies who do not have an Active Directory infrastructure or SMS and utilize a separate means for software distribution in the company or desire to deploy Silverlight to Apple clients.
Selecting the right version of Silverlight
Silverlight is available for WindowsXP, Windows Server 2003, WindowsVista, and Apple Mac OS X 10.4. The following table lists the operating systems supported by Silverlight, along with the Setup file name for each.
Operating systemFile nameWindows XP SP2, Windows Server 2003 or Windows VistaSilverlight.1.0.exeApple Mac OS XSilverlight.1.0.dmg
All versions of Silverlight can be downloaded from the Silverlight Web site at HYPERLINK "http://www.microsoft.com/silverlight/downloads.aspx"http://www.microsoft.com/silverlight/downloads.aspx
Installation Switches
The Silverlight install executable file has a number of different switches to customize the installation. The syntax of the setup file is as follows:
Silverlight.1.0beta.exe
/q = quiet install. This installs Silverlight without seeing the GUI.
/qu = quiet uninstall. This uninstalls Silverlight without seeing the GUI.
Using Group Policy to Install Silverlight
Group policy is ideal to deploy Silverlight in small to medium sized organizations or when it is not being deployed to a large number of users simultaneously. For large organizations, Silverlight is best deployed using SMS or another third-party software distribution tool. A limitation of the group policy deployment method is that it applies only to Microsoft operating systems, ignoring Apple operating system clients.
Group Policy Scripts Extension Overview
The Group Policy infrastructure includes a Scripts extension that consists of the following components:
A Microsoft Management Console (MMC) server-side extension of the Group Policy Object Editor MMC snap-in that is used for administering and configuring scripts. The administrator uses the scripts extension to specify scripts policy settings in a Group Policy object (GPO), and then links the GPO to the site, domain, or organizational unit to which the administrator wants to assign the scripts.
The Group Policy Object Editor snap-in includes two extensions for script deployment:
Scripts (Startup/Shutdown). Administrators use this extension to specify scripts that run when the computer starts up or shuts down. These scripts run as Local System. Scripts (Startup/Shutdown) is located under the Computer Configuration\Windows Settings node of Group Policy Object Editor.
Scripts (Logon/Logoff). Administrators use this extension to specify scripts that run when the user logs on or logs off the computer. These scripts run as User, not as Administrator. Scripts (Logon/Logoff) is located under the User Configuration\Windows Settings node of Group Policy Object Editor.
A client-side extension, which is a dynamic-link library (DLL) on the client computer that interacts with the Group Policy infrastructure and implements Group Policy scripts on the client computer. A separate process called Userinit.exe runs the scripts.
For more information about Group Policy Scripts extensions, see the HYPERLINK "http://go.microsoft.com/fwlink/?LinkId=83122"Scripts Extension Technical Reference of the Windows Server 2003 Group Policy Technical Reference on the Microsoft TechNet Web site. For information about Windows Script Host, see HYPERLINK "http://go.microsoft.com/fwlink/?LinkId=83247"Windows Script Host on the MSDN Web site.
Important:
Group Policy provides the ability to affect configurations across hundreds and even thousands of computers in an organization. Therefore, it is critical that you rigorously test all new Group Policy configurations or deployments in a non-production environment before you move them into your production environment. For detailed information about staging Group Policy deployments, see HYPERLINK "http://technet2.microsoft.com/WindowsServer/en/library/e5288e42-62b8-4f9e-a665-95b6e02389a31033.mspx" \t "_self"Staging Group Policy Deployments in the Designing a Managed Environment book of the Microsoft Windows Server2003 DeploymentKit.
By default, the system lets combined sets of scripts run for up to 600 seconds (10 minutes) only. Administrators can use a policy setting to adjust this interval to ensure the startup script completes running. The Maximum wait time for Group Policy scripts policy setting specifies how long the system waits for scripts applied by Group Policy to run. This setting limits the total time allowed for all logon, startup, and shutdown scripts applied by Group Policy to finish running. As with any Group Policy deployment, you must fully test your startup scripts in a staging environment before deploying them to your production environment. Testing will help you determine the value to use for the Maximum wait time for Group Policy scripts policy for your particular network environment. Setting this value too low may cause the install to terminate prematurely. There are factors that may affect this value, such as network speed, client computer hardware, and other scripts running on the client computer. By fully testing this policy setting you can determine the appropriate value to use for your specific environment.
The Maximum wait time for Group Policy scripts policy setting is available in the Computer Configuration\Administrative Templates\System\Scripts folder in Group Policy Object Editor. For information about configuring this policy setting, see HYPERLINK \l "_Specifying_maximum_time" \t "_self"Specifying maximum time for startup scripts to run.
Assigning computer startup scripts
Startup scripts run as Local System and have the full rights required to run as Local System.
Note:
The following procedures assume you have already installed GPMC. You can download GPMC from the Microsoft Download Center site. See HYPERLINK "http://go.microsoft.com/fwlink/?LinkId=58541" \t "_blank"Download Group Policy Management Console (GPMC) for more information. If you are using Windows Vista, GPMC is integrated into the operating system.
You must be logged on as a member of the Domain Administrators security group, the Enterprise Administrators security group, or the Group Policy Creator Owners security group to complete these procedures.
The following sections provide a sample script and instructions for installing Silverlight.
Sample Script Requirements:
The target computer must be running Windows XP, Windows Server 2003, or Windows Vista.
A Read-only network share containing the Silverlight.exe installer
A Read-write network share for storing centralized log files
Example Script
setlocal
REM *************************************************************************
REM Environment customization begins here. Modify variables below.
REM *************************************************************************
REM Set DeployServer to a network-accessible location containing the Silverlight installer
set DeployServer=\\server\share\Silverlight
REM Set InstallerName to the name of your copy of the Silverlight installer
set InstallerName=Silverlight.1.0.exe
REM Set LogLocation to a central directory to collect log files.
Set LogLocation=\\server\share\SilverlightLogs
REM *************************************************************************
REM Deployment code begins here. Do not modify anything below this line.
REM *************************************************************************
reg query HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Silverlight
if %errorlevel%==1 (goto DeploySilverlight) else (goto End)
REM If 1 returned, the product was not found. Run setup here.
:DeploySilverlight
start /wait %DeployServer%\%InstallerName%
echo %date% %time% Setup ended with error code %errorlevel%. >> %LogLocation%\%computername%.txt
REM If 0 or other was returned, the product was found or another error occurred. Do nothing.
:End
EndlocalIn this example, script logging information is written to computername.txt file. A return code of 0 in the log file indicates that the installation completed successfully. For more information about other error codes for Windows Installer processes for Silverlight products, see the HYPERLINK "http://msdn2.microsoft.com/en-us/library/aa368542.aspx"Windows Installer Error Code Reference on the Microsoft Developer Network website and the HYPERLINK \l "_Silverlight_installation_and"troubleshooting section of this deployment guide.
Deploying Computer Startup Scripts
To set up scripts on the domain controller
Copy the script and dependent files to the Netlogon shared folder or another shared folder on the domain controller from which you want the script to run.
Note:
The target computer account needs Read permission to the Silverlight source files location, and Read and Write permissions to the log file location. The log file can be stored on the local computer.
To assign computer startup scripts
1. Click Start, click Control Panel, click Administrative Tools, and click Group Policy Management.2. In the console tree, double-click Group Policy Objects in the forest and domain that contains the Group Policy object (GPO) that you want to edit. This is located in Forest name/Domains/Domain name/Group Policy Objects. 3. Right-click the GPO you want to use to assign scripts and click Edit. This opens the Group Policy Object Editor console.4. In Group Policy Object Editor, in the console tree, click Scripts (Startup/Shutdown). This is located in the Computer Configuration\Windows Settings node.5. In the details pane, double-click Startup. 6. In the Startup Properties dialog box, click Add. 7. In the Add a Script dialog box, do the following:
In Script Name, type the path to the script, or click Browse to search for the script file in the Netlogon shared folder on the domain controller.
In Script Parameters, type the parameters you want to use as you would type them on the command line. For example, if your script included parameters called //logo (display banner) and //I (interactive mode), type: //logo //I.8. In the Startup Properties dialog box, specify the options you want to use. The following options are available:
Startup Scripts for Group Policy object. Lists all the scripts that are currently assigned to the selected Group Policy object. If you assign multiple scripts, the scripts are processed in the order that you specify. To move a script up in the list, select the script and click Up. To move a script down in the list, select the script and click Down.
Add. Opens the Add a Script dialog box, where you can specify additional scripts to use.
Edit. Opens the Edit Script dialog box, where you can modify script information, such as name and parameters.
Remove. Removes the selected script from the Startup Scripts list.
Show Files. Displays the script files that are stored in the selected Group Policy object. Specifying maximum time for startup scripts to run
To set the maximum time for startup scripts to run
Click Start, click Control Panel, click Administrative Tools, and click Group Policy Management.
In the console tree, double-click Group Policy Objects in the forest and domain that contains the Group Policy object (GPO) that you want to edit. This is located in Forest name/Domains/Domain name/Group Policy Objects.
Right-click the GPO you want to use to assign scripts and click Edit. This opens the Group Policy Object Editor console.
In Group Policy Object Editor, in the console tree, navigate to Computer Configuration\Administrative Templates\System\Scripts.
On the details pane (left side of the console), double-click the Maximum wait time for Group Policy scripts policy setting, click Enabled, enter the value you want to use in the Seconds scroll-down box, and then click OK.
Important:
Make sure you fully test startup scripts in a staging, non-production environment before you deploy them to your production environment.Using SMS to Install Silverlight
Overview: Automating the deployment of Silverlight
Using Microsoft Systems Management Server (SMS) to automate your deployment can help eliminate desktop visits and human error by electronically distributing your Silverlight package over the network from a central location to users' computers. You can choose the group of users' computers on which you want to automatically install the package and the dates and times when you want the installation to occur. This flexibility can help you avoid network congestion and ensure that the deployment occurs after users have had sufficient time to receive training and prepare for the installation.
SMS installs the Silverlight software without requiring user interaction (silent install), and it can install the software with administrative credentials even if a user without administrative credentials is logged on by running in the context of the SYSTEM account. Users do not need to log on to servers or computers that are based on Microsoft WindowsNT to perform updates. This makes SMS ideal for off-hours distribution or distribution to security-enabled servers. SMS provides status reports so that you know when the software has been successfully installed.
For more information about SMS, please see the product documentation at: HYPERLINK "http://www.microsoft.com/technet/sms/"http://www.microsoft.com/technet/sms/
Preparing to automatically deploy Silverlight
Step 1: Creating an SMS package for Silverlight
Complete the following steps to create the SMS package (this is the actual package that SMS uses for distribution).
Create an SMS package for Silverlight
1. To open the SMS Administrator Console, click Start, point to All Programs, point to Systems Management Server, and then click SMS Administrator Console.
2. In the left pane, expand Site Database.
3. Right-click Packages, click New, and then click Package.
4. Click the General tab, and type the name of the package, its version, its publisher, its language, and a descriptive comment. (The only required value on this tab is Name.)
6. Click the Data Source tab.
7. On the Data Source tab, select the This Package Contains Source Files check box.
8. Under Source Directory, click Set to open the Set Source Directory dialog.
9. Type the path to the Silverlight Setup files, or click Browse to locate the directory. Click OK to return to the Data Source tab.
10. Click the Distribution Settings tab. Select your preferred priority and sender.
11. Click OK to create the package.Every SMS package must include at least one program to define the command line parameters to use when running the Setup. Some packages will have multiple programs.
Create a program
1. To open the SMS Administrator Console, click Start, point to All Programs, point to Systems Management Server, and then click SMS Administrator Console.
2. In the left pane, expand Site Database, expand Packages, and then expand your Silverlight package.
3. Right-click Programs, click New, and then click Program.
4. In the General tab, enter a descriptive name for the program.
5. In Command line, enter the exact command line to be used when this program is run. Most deployments will use one of the following command lines. See the HYPERLINK \l "_Installation_Switches"installation switches section for more information.
Silverlight.1.0.exe
Silverlight.1.0.exe /q (Silent Install - recommended)
6. In the Run drop-down list, select the Normal option to determine how the Setup window will be displayed when the program is run.
7. In the After running drop-down list, select the option that describes the action to take after the program has completed. The recommended setting is No Action Required.
8. Click the Requirements tab. Enter the information for the Silverlight software requirements that apply to this program. Use the drop-down lists to determine how much disk space should be available for the setup (10 MB), the maximum amount of time to let the program run (3 minutes), and the operating systems that are supported by this program. This can be determined by examining the HYPERLINK "http://www.microsoft.com/silverlight/system-requirements.aspx"Microsoft Silverlight System Requirements page.
9. Click the Environment tab. In the Program can run drop-down list, select Whether or not a user is logged on. This will install Silverlight as mandatory and silent.
10. Under Run mode, click the option that describes the required user permission level and choose Run with administrative rights.
11. Click the Advanced tab. Under When this program is assigned to a computer, select Run once for the computer.
12. Click OK to save the program.Step 2: Selecting the SMS distribution servers
Your SMS distribution servers are the distribution points for your SMS package. SMS copies all the files from the package source folder to a folder on your SMS distribution servers. Setup runs from these SMS distribution servers to support the users on your network.
To select the SMS distribution servers
1. On the SMS Administrator Console, in the left pane under Packages, right-click the SMS package that you designated for Silverlight, and then click Distribution points.
2. On the New Distribution Points Wizard welcome page, click Next.
3. On the Copy Package page, select your distribution servers from the Distribution points list, and then click Finish.Step 3: Creating and running a job to distribute the SMS package
After you create the SMS package for Silverlight, you must create a job to distribute it. This job includes:
T h e l i s t o f u s e r s ' c o m p u t e r s t h a t w i l l r e c e i v e t h e S M S p a c k a g e f o r S i l v e r l i g h t . T h i s i s d e f i n e d i n S M S a s a c o l l e c t i o n . E v e r y c o m p u t e r i n a c o l l e c t i o n w i l l r e c e i v e a n a d v e r t i s e m e n t f o r t h e S M S j o b w h e n i t i s a s s i g n e d .
T h e s c h e d u l e f o r r u n n i n g t h e p a c k a g e .
A n a d v e r t i s e m e n t f o r t h e p a c k a g e , w h i c h w i l l b e s e n t t o t h e u s e r s ' c o m p u t e r s .
T o c r e a t e a n d r u n a j o b t o d i s t r i b u t e t h e S M S p a c k a g e
1 . O n t h e S M S A d m i n i s t r a t o r C o n s o l e , i n t h e l e f t p a n e , e x p a n d S i t e D a t a b a s e .
2 . R i g h t - c l i c k A d v e r t i s e m e n t s , p o i n t t o N e w , a n d t h e n c l i c k A d v e r t i s e m e n t .
3 . I n t h e A d v e r t i s e m e n t P r o p e r t i e s d i a l o g b o x , s e l e c t v a l u e s f o r t h e f o l l o w i n g f i e l d s :
N a m e . T h e n a m e f o r t h e j o b .
C o m m e n t . A d e s c r i p t i o n o f t h e p a c k a g e . T h i s f i e l d i s o p t i o n a l .
P a c k a g e . T h e S M S p a c k a g e f o r S i l v e r l i g h t t h a t y o u c r e a t e d i n H Y P E R L I N K \ l " D S D O C _ B K M K _ 2 c f 1 1 d a 2 e _ 1 c 6 d _ 4 0 9 d _ a 2 d e _ 5 9 9 2 " \ o " S t e p 2 : C r e a t i n g a n S M S p a c k a g e f o r S i l v e r l i g h t " S t e p 1 : C r e a t i n g a n S M S p a c k a g e f o r S i l v e r l i g h t e a r l i e r i n t h i s s e c t i o n .
P r o g r a m . T h e S i l v e r l i g h t e x e c u t a b l e f i l e , w h i c h i s p a r t o f t h e p a c k a g e t h a t y o u b u i l t i n H Y P E R L I N K \ l " D S D O C _ B K M K _ 1 c f 1 1 d a 2 e _ 1 c 6 d _ 4 0 9 d _ a 2 d e _ 5 9 9 2 " \ o " S t e p 1 : B u i l d i n g a p a c k a g e f o r S M S d e p l o y m e n t " S t e p 1 : C r e a t i n g a n S M S p a c k a g e f o r S i l v e r l i g h t e a r l i e r i n t h i s s e c t i o n .
C o l l e c t i o n . P r o v i d e t h e n a m e you desire for the collection to which you want to deploy the package, such as Silverlight.
4. Click the Schedule tab, and then select the dates and times when you want the package to run. If you want to mandatory force the package installation, specify the date and time of installation under mandatory assignments.
5. Click the Advanced Client tab, and then for When a distribution point is available locally, select Run Program from a Distribution Point & for When no distribution point is available locally, select Download Program from a remote distribution pointWhen the job runs, you can view it by clicking Advertised Programs in the Windows Control Panel. The job also creates an error log file (Iesmswrap.mif), which is located in the \Windows\Temp folder. You can perform a search for *.mif to locate the file.
The installation process
At the scheduled date and time, SMS sends the package to the specified users' computers. When these computers recognize that the package is available, the installation process begins.
Silverlight Setup performs the following tasks:
Pre-requisite check (see HYPERLINK \l "_System_requirements_for"Installation Requirements in this document)
Ensure a later version isnt installed
Uninstall previously installed version if present
Install the product
Write Silverlight registry keys
Create files in %ProgramFiles%\Microsoft Silverlight\
Part 3: Maintaining and Supporting Silverlight
Part 3 of the Silverlight Deployment Guide describes the processes used to maintain and support Silverlight in your organization after your initial deployment.
HYPERLINK \l "DSDOC_cc63243b_e057_4608_9206_0e9da66655" \o "Managing Browser Settings Through Group Policy"Managing Browser Settings Through Group Policy describes how to manage Silverlight and administer system policies and restrictions in your Active Directory environment by using Group Policy Administrative Templates and the Silverlight Maintenance extension.
HYPERLINK \l "DSDOC_457de51b_2af5_48a1_9a16_8a193ff50f" \o "Keeping Silverlight Updated"Keeping Silverlight Updated reviews system management, automatic update, and other tools to deploy updated versions of Silverlight to your users' computers.
HYPERLINK \l "DSDOC_082495d9_84c1_474b_a6c0_e11c4c3459" \o "Troubleshooting"Troubleshooting helps you troubleshoot Silverlight packages, Silverlight installation, and Group Policy settings in your corporate environment.
Managing Silverlight Settings Through Group Policy
If you use an Active Directory environment to administer the computers in your network, Group Policy provides a comprehensive set of policy settings to manage Silverlight after you have deployed it to your users' computers. You can use the Administrative Template policy settings to establish and lock registry-based policies for Silverlight options.
Group Policy overview
Group Policy is a collection of settings that are used to define and manage configurations for groups of users and computers in an Active Directory environment. Group Policy enables you to define a Silverlight configuration and other software and system configurations as part of Group Policy objects (GPOs). The GPOs are linked to hierarchical Active Directory containers such as sites, domains, or organizational units. They enable you to manage your Silverlight and other system configurations for multiple users on any computer that is joined to the domain.
Note
You must be a member of the Administrators group to work with GPOs.
For more information about Group Policy, s e e :
W i n d o w s S e r v e r 2 0 0 3 G r o u p P o l i c y
( H Y P E R L I N K " h t t p : / / g o . m i c r o s o f t . c o m / f w l i n k / ? L i n k I d = 5 6 5 4 4 " h t t p : / / g o . m i c r o s o f t . c o m / f w l i n k / ? L i n k I d = 5 6 5 4 4 )
M a n a g i n g W i n d o w s X P S e r v i c e P a c k 2 F e a t u r e s U s i n g G r o u p P o l i c y
( H Y P E R L I N K " h t t p : / / g o . m i c r o s o f t . c o m / f w l i n k / ? L i n k I d = 5 5 5 8 7 " h t t p : / / g o . m i c r o s o f t . c o m / f w l i n k / ? L i n k I d = 5 5 5 8 7 )
G r o u p P o l i c y F r e q u e n t l y A s k e d Q u e s t i o n s
( H Y P E R L I N K " h t t p : / / g o . m i c r o s o f t . c o m / f w l i n k / ? L i n k I d = 5 9 1 8 2 " h t t p : / / g o . m i c r o s o f t . c o m / f w l i n k / ? L i n k I d = 5 9 1 8 2 )
G r o u p P o l i c y S e t t i n g s R e f e r e n c e f o r W i n d o w s V i s t a
( H Y P E R L I N K " h t t p : / / g o . m i c r o s o f t . c o m / f w l i n k / ? L i n k I d = 5 4 0 2 0 " h t t p : / / g o . m i c r o s o f t . c o m / f w l i n k / ? L i n k I d = 5 4 0 2 0 )
I m p l e m e n t i n g C o m m o n D e s k t o p M a n a g e m e n t S c e n a r i o s w i t h t h e G r o u p P o l i c y M a n a g e m e n t C o n s o l e
( H Y P E R L I N K " h t t p : / / g o . m i c r o s o f t . c o m / f w l i n k / ? L i n k I d = 7 5 3 1 6 " h t t p : / / g o . m i c r o s o f t . c o m / f w l i n k / ? L i n k I d = 7 5 3 1 6 )
W i n d o w s V i s t a S e c u r i t y G u i d e
( H Y P E R L I N K " h t t p : / / g o . m i c r o s o f t . c o m / f w l i n k / ? L i n k I d = 7 4 0 2 8 " h t t p : / / g o . m i c r o s o f t . c o m / f w l i n k / ? L i n k I d = 7 4 0 2 8 )
U s i n g A d m i n i s t r a t i v e T e m p l a t e s e t t i n g s t o m a n a g e S i l v e r l i g h t
This section describes how to use registry-based Administrative Template policy settings in Group Policy to manage Silverlight on users' computers that are running WindowsServer 2003, Windows XP withSP2, or WindowsVista.
For an overview of the concepts and architecture of the Administrative Templates, see HYPERLINK "http://go.microsoft.com/fwlink/?LinkID=29910"http://go.microsoft.com/fwlink/?LinkID=29910.
Important
The Silverlight controls Automatic Update policy can be set per-user or per-machine. If an administrator sets a per-machine setting, then this overrides the per-user setting. We recommend that you manage Silverlight by using the Administrative Template settings in Group Policy whenever possible because these settings are always written to a secure per-machine key in the registry. This means that users cannot change settings by using the Silverlight user interface or by modifying the per-user update mode registry key.
ADM and ADMX file template settings
The text below can be used to create an ADM or ADMX file for Silverlight settings. For more information about how to create and use ADM or ADMX files, see the articles:
How to create custom administrative templates in Windows 2000
HYPERLINK "http://support.microsoft.com/kb/323639"http://support.microsoft.com/kb/323639
HYPERLINK "http://download.microsoft.com/download/3/b/a/3ba6d659-6e39-4cd7-b3a2-9c96482f5353/Managing%20Group%20Policy%20ADMX%20Files%20Step%20by%20Step%20Guide.doc"Managing Group Policy ADMX Files Step-by-Step Guide
How to create a Central Store for Group Policy Administrative Templates in Window VistaHYPERLINK "http://support.microsoft.com/kb/929841"http://support.microsoft.com/kb/929841
ADM file:
CLASS MACHINE
CATEGORY !!SL_PARAMS
KEYNAME "HKEY_LOCAL_MACHINE\Software\Microsoft\Silverlight\"
POLICY !!SET_AUPDATE
EXPLAIN !!AUPDATE_HELP
PART !!AUpdateBox DROPDOWNLIST NOSORT REQUIRED
VALUENAME UpdateMode
ITEMLIST
NAME !!Automatic VALUE "0"
NAME !!Prompt VALUE "1"
NAME !!Disable VALUE "2" DEFAULT
END ITEMLIST
END PART
END POLICY
END CATEGORY
[strings]
SL_PARAMS="Silverlight"
SET_AUPDATE="Change Automatic Update Behavior"
AUPDATE_HELP="When this policy is enabled, it will control the Silverlight controls automatic update behavior. If the policy is disabled, it will not change the default behavior and the control will update automatically over the internet. The Silverlight controls automatic update mechanism is independent of both the Windows Update and Microsoft Update mechanisms. Silverlight can be configured to use one of three automatic update modes: \n\nAutomatic - Automatically detects, downloads, and installs updates \nPrompt for updates - Detects when an update is available and prompts if you would like to download and install the update \nTurn off auto updates - Does not check for or automatically download updates. This option should be used in most corporate environments if you are using SMS, , software update services (SUS), or another enterprise software management solution."
AUpdateBox="Update Mode: "
Automatic="Automatically download"
Prompt="Prompt for updates"
Disable="Turn off auto updates"
ADMX file:
-
0
-
1
-
2
ADML file:
enter name here
enter description here
Silverlight
Change Automatic Update Behavior
When this policy is enabled, it will control the Silverlight controls automatic update behavior. If the policy is disabled, it will not change the default behavior and the control will update automatically over the internet. The Silverlight controls automatic update mechanism is independent of both the Windows Update and Microsoft Update mechanisms. Silverlight can be configured to use one of three automatic update modes: \n\nAutomatic - Automatically detects, downloads, and installs updates \nPrompt for updates - Detects when an update is available and prompts if you would like to download and install the update \nTurn off auto updates - Does not check for or automatically download updates. This option should be used in most corporate environments if you are using SMS, , software update services (SUS), or another enterprise software management solution.
Update Mode:
Automatically download
Prompt for updates
Turn off auto updates
Update Setting:
Registry-based Silverlight policy settings
The Silverlight controls automatic update mechanism is independent of both the Windows Update and Microsoft Update mechanisms. Silverlight can be configured to use one of three automatic update modes:
Auto Updates - Automatically detects, downloads, and installs updates. This is the default setting after an install. The client will attempt to request files from Microsoft at most one time per day to detect if there is a newer version of the Silverlight client. If there is a newer version, it will automatically download and install the update without any user intervention required.
Prompted Updates - Detects when an update is available and prompts if you would like to download and install the update. This uses the same detection location and schedule as the Auto Updates option.
No Updates - Does not check for or automatically download updates. This option should be used in most corporate environments if you are using SMS, software update services (SUS), or another enterprise software management solution.
If using the Silverlight updater you will need to give the client computer access to the following domains:
go.microsoft.com
silverlight.dlservice.microsoft.com
rs.update.microsoft.com
slupdate.dlservice.microsoft.com
www.microsoft.com
These settings are available in the custom ADM or ADMX file you created as referenced above. The registry setting that the administrative template files contain is:
Key path: HKEY_LOCAL_MACHINE\Software\Microsoft\Silverlight\
Value Name: UpdateMode
Value Type: DWORD
Valid Values:
Auto Updates 0x00000000
Prompted Updates0x00000001
No Updates0x00000002
You can locate this setting in the following policy path for your GPOs:
CategoryDescriptionComputer Configuration\Administrative Templates\SilverlightContains settings to enable or disable standard Silverlight configurations.Modifying registry-based Silverlight policy settings
You can modify the Silverlight policy settings that apply to individual computers.
To modify registry-based Silverlight policy settings
1. Open Group Policy Object Editor by using one of the methods described in the Group Policy product documentation (HYPERLINK "http://go.microsoft.com/fwlink/?linkid=67717"http://go.microsoft.com/fwlink/?linkid=67717).
The method you use will depend on the GPO that you want to manage. One way to open Group Policy Object Editor is to click Start, click Run, and then enter Gpedit.msc.
2. Double-click Policy, and then double-click Computer Configuration.
3. Double-click Administrative Templates, double-click Windows Components, and then double-click Silverlight.
4. In the left pane, click the category you want to work with, and then in the right pane, double-click the item that you want to edit.
5. Click the Setting tab, and then configure the policy setting. Typical choices for a setting are Not Configured, Enabled, or Disabled. Some settings require you to make additional selections or enter additional information.Keeping Silverlight Updated
After you deploy Silverlight in your corporate network, you can use the following tools to distribute updated versions of Silverlight to your users' computers:
H Y P E R L I N K \ l " _ A u t o m a t i c _ U p d a t e s " A u t o m a t i c U p d a t e s . T h e S i l v e r l i g h t c o n t r o l i n c l u d e s a n a u t o m a t i c u p d a t e f e a t u r e w h i c h w i l l a u t o m a t i c a l l y i n s t a l l u p d a t e s o n m a c h i n e s r u n n i n g W i n d o w s o p e r a t i n g s y s t e m . T o d i s a b l e A u t o m a t i c U p d a t e s o f S i l v e r l i g h t , s e e t h e a d m i n i s t r a t i v e s e t t i n g s s e c t i o n a b o v e .
H Y P E R L I N K \ l " D S D O C _ B K M K _ S o f t w a r e D i s t 4 5 7 d e 5 1 b _ 2 a f 5 _ 4 8 a " \ o " S o f t w a r e d i s t r i b u t i o n t o o l s " S o f t w a r e U p d a t e M e t h o d s . U s e s y s t e m u p d a t e m a n a g e m e n t t o o l s s u c h a s S y s t e m s M a n a g e m e n t S e r v e r o r t h e s o f t w a r e d i s t r i b u t i o n capabilities in Group Policy to update Silverlight on users' computers.
Automatic Updates
You can configure Silverlight to automatically update itself while it is in use. Every twenty-four hours, the version of Silverlight that is installed on your users browser compares itself against the most current Silverlight version that is available for download. If the version on the web is newer than the version on users computers then Silverlight will automatically update itself.
On Windows operating systems, the default functionality is to automatically find, download, and install updates. The control can be configured to prompt the user before downloading and installing updates. Alternatively, automatic updates can be disabled as described in the administrative settings section above.
Note
Your users must have local administrative privileges on their computers to install an updated version of Silverlight on Windows XP and 2003. However, updates can be installed to disable non-admin patching on Windows Vista you must use the DisableLUAPatching policy as described here: HYPERLINK "http://msdn2.microsoft.com/en-us/library/aa368302.aspx"http://msdn2.microsoft.com/en-us/library/aa368302.aspx.
Note
Your users must have internet access to find and download updates through the Silverlight updater.
By using the Administrative Templates policy setting Automatically check for Silverlight updates, you can disable automatic checks for Silverlight updates. For more information about changing the Automatic Update settings, see HYPERLINK \l "_Managing_Silverlight_Settings" \o "Managing Browser Settings Through Group Policy"Managing Silverlight Settings Through Group Policy.
Software update methods
If you already manage software distribution and updates on your network by using Systems Management Server (SMS) or Group Policy Software Installation, you can use these tools for ongoing deployments of Silverlight.
Note
If any of these options are used, the built-in automatic update method should be disabled as referenced in the HYPERLINK \l "_Registry-based_Silverlight_policy"Registry-based Silverlight policy settings section.
Systems Management Server
SMS is a dedicated, flexible system to use for updates and software deployment. It provides robust features to facilitate scheduling, managing, and reporting for your Silverlight distributions in large-scale corporate environments.
For more information about using SMS for the distribution of Silverlight, see
< V ` k l t z X d v w { L W Y j y - / K L h i 緳眘 h& mH nH uh( | h& 0J mH nH uhI j hI UhvP` hvP` h " hl h hkT hxBs hD3 hZ6 j% hL#4 h? UmH nH u hk&